CVE-2026-3468mediumCWE-79

CVE-2026-3468: falha de média gravidade em SonicWall Email Security

Publicada em

Seguir esta CVE+ Monitorar Email Security

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.8epss 0.2%
A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as admin user to potentially execute arbitrary JavaScript code.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
SonicWall · Email Security
CVEs relacionadas — SonicWall Email Security

No mesmo produto, das mais perigosas para as menos.

CVE-2021-20021CRITICALCVE-2021-20021EPSS 88.8%KEVCVE-2021-20023MEDIUMCVE-2021-20023EPSS 51.7%KEVCVE-2021-20022HIGHCVE-2021-20022EPSS 16.6%KEVCVE-2024-22398MEDIUMCVE-2024-22398EPSS 0.9%CVE-2026-3469LOWCVE-2026-3469EPSS 0.4%CVE-2025-40605MEDIUMCVE-2025-40605EPSS 0.4%